What motivated a company to invest in cyber security

I can see why companies would invest in physical security but what motivates a company to invest in network/cyber security. A small to medium sized web shop for example let’s say has a data breach for example, is it that customers stop using the site after a breach, what if they didn’t announce the data breach? How does a breach affect the bottom line?

breach companies customers cyber cyber security cybersecurity data data breach medium network physical physical security security shop web